// For flags

CVE-2023-23397

Microsoft Office Outlook Privilege Escalation Vulnerability

Severity Score

9.8
*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

32
*Multiple Sources

Exploited in Wild

Yes
*KEV

Decision

Act
*SSVC
Descriptions

Microsoft Outlook Elevation of Privilege Vulnerability

Microsoft Office Outlook contains a privilege escalation vulnerability that allows for a NTLM Relay attack against another service to authenticate as the user.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Attack Vector
Network
Attack Complexity
Low
Authentication
None
Confidentiality
Complete
Integrity
Complete
Availability
Complete
* Common Vulnerability Scoring System
SSVC
  • Decision:Act
Exploitation
Active
Automatable
No
Tech. Impact
Total
* Organization's Worst-case Scenario
Timeline
  • 2023-01-11 CVE Reserved
  • 2023-03-14 CVE Published
  • 2023-03-14 Exploited in Wild
  • 2023-03-16 First Exploit
  • 2023-04-04 KEV Due Date
  • 2025-02-04 CVE Updated
  • 2025-04-02 EPSS Updated
CWE
  • CWE-20: Improper Input Validation
  • CWE-294: Authentication Bypass by Capture-replay
CAPEC
References (33)
URL Tag Source
URL Date SRC
https://packetstorm.news/files/id/171376 2023-03-16
https://github.com/ahmedkhlief/CVE-2023-23397-POC 2023-03-17
https://github.com/ahmedkhlief/CVE-2023-23397-POC-Using-Interop-Outlook 2023-03-17
https://github.com/Pushkarup/CVE-2023-23397 2023-10-26
https://github.com/Cyb3rMaddy/CVE-2023-23397-Report 2023-03-24
https://github.com/api0cradle/CVE-2023-23397-POC-Powershell 2023-03-17
https://github.com/Trackflaw/CVE-2023-23397 2023-03-24
https://github.com/ka7ana/CVE-2023-23397 2023-03-16
https://github.com/tiepologian/CVE-2023-23397 2023-03-21
https://github.com/grn-bogo/CVE-2023-23397 2023-03-16
https://github.com/vlad-a-man/CVE-2023-23397 2023-05-07
https://github.com/djackreuter/CVE-2023-23397-PoC 2023-03-18
https://github.com/alicangnll/CVE-2023-23397 2023-03-17
https://github.com/3yujw7njai/CVE-2023-23397-POC 2023-03-31
https://github.com/cleverg0d/CVE-2023-23397-PoC-PowerShell 2023-03-17
https://github.com/moneertv/CVE-2023-23397 2023-03-18
https://github.com/j0eyv/CVE-2023-23397 2023-03-16
https://github.com/Symbolexe/CVE-2023-23397 2024-06-22
https://github.com/SecCTechs/CVE-2023-23397 2023-03-20
https://github.com/stevesec/CVE-2023-23397 2023-03-23
https://github.com/jacquesquail/CVE-2023-23397 2023-03-29
https://github.com/im007/CVE-2023-23397 2023-03-17
https://github.com/alsaeroth/CVE-2023-23397-POC 2024-02-07
https://github.com/Zeppperoni/CVE-2023-23397-Patch 2023-03-24
https://github.com/TheUnknownSoul/CVE-2023-23397-PoW 2024-03-20
https://github.com/sqrtZeroKnowledge/CVE-2023-23397_EXPLOIT_0DAY 2024-09-02
https://github.com/BillSkiCO/CVE-2023-23397_EXPLOIT 2024-10-21
https://github.com/BronzeBee/cve-2023-23397 2024-09-17
https://github.com/shaolinsec/CVE-2023-23397 2023-03-23
https://github.com/Muhammad-Ali007/OutlookNTLM_CVE-2023-23397 2024-12-01
https://github.com/sarsaeroth/CVE-2023-23397-POC 2024-02-07
https://github.com/AiK1d/CVE-2023-23397-POC 2023-11-06
URL Date SRC
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23397 2024-05-29
URL Date SRC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Microsoft
Search vendor "Microsoft"
 365 Apps
Search vendor "Microsoft" for product "365 Apps"
-enterprise
Affected
Microsoft
Search vendor "Microsoft"
 Office
Search vendor "Microsoft" for product "Office"
 2019
Search vendor "Microsoft" for product "Office" and version "2019"
-
Affected
Microsoft
Search vendor "Microsoft"
 Office
Search vendor "Microsoft" for product "Office"
 2021
Search vendor "Microsoft" for product "Office" and version "2021"
ltsc
Affected
Microsoft
Search vendor "Microsoft"
 Outlook
Search vendor "Microsoft" for product "Outlook"
 2013
Search vendor "Microsoft" for product "Outlook" and version "2013"
sp1
Affected
Microsoft
Search vendor "Microsoft"
 Outlook
Search vendor "Microsoft" for product "Outlook"
 2013
Search vendor "Microsoft" for product "Outlook" and version "2013"
sp1, rt
Affected
Microsoft
Search vendor "Microsoft"
 Outlook
Search vendor "Microsoft" for product "Outlook"
 2016
Search vendor "Microsoft" for product "Outlook" and version "2016"
-
Affected